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INTRODUCTION 


TD1 provides a powerful means of program debugging for 6800 users 

by providing interactive tracing and disassembly capabilities. The 
TRACE mode allows the program under test to be “software-single-stepped" 
or to be partially free run. The disassembly mode allows the programmer 
to view memory much as an assembled program listing. 


WHAT IS TRACING? 


Tracing is the ability to control the execution of a program under test 
so that the contents of the machine's registers and memory may be 
examined on an instruction-by-instruction basis. In this manner, 

the programmer may follow the program execution in order to be able to 
view intermediate results so that it may be determined where the program 


is not working properly. 


WHAT IS DISASSEMBLY? 


Disassembling may be thought of as the reverse process of program 
assembly. Whereas assembling converts easily read mnemonics to machine 
language, the disassembler converts the harder to understand machine 
language back to a more easily read mnemonic form. So what? Well, 
suppose you don't have the source of a program in which you wish to 
install a special I/O routine. The disassembler will make it easier 

to look at the program to find the existing I/O routines. 


OPERATING PROCEDURES 


This section describes how to operate under the control of TDl. 

STEP 1: LOAD THE USER PROGRAM 

The program to be debugged must be loaded into memory by whatever means are 
available to the user on their system. For example: the DOS68 "GET" 
command, or the MIKBUG™ "L" command. 


STEP 2: LOAD TD1 


TD1 is loaded into memory. See Appendix B for the different address spaces. 


STEP 3: BEGIN EXECUTING TD1 
There are two entry points to TDI: 
1) The cold start entry point ($X700). The first three bytes of TDI] 


are a jump to the cold start entry point. The cold start entry point 
saves the current register contents as the initial values for the 


registers when tracing with the exception that the N, Z, and V status 
bits will be reset. 


2) The warm entry point ($X703). The second three bytes of TD1 
are the warm start entry point. This entry point allows TD1 to be 
restarted with current register contents unchanged. 


STEP 4: TD1 SAYS "I'M READY" 


TDl1 indicates its readiness by typing ">T" after which you are to enter 
a four digit hex starting address for the trace or disassembly. 


STEP 5: SELECT MODE 


TD1 will type "TD" following the starting address entered. This prompt 
is asking for which mode to enter; enter "T" for trace mode, or "D" for 
disassembly mode. At this point you may also select the print option by 
entering "P". The print option transfers a copy of all input and output 
to a parallel interface whose I/O address is stored in locations $xX715 
and $X716 (the default address is $801C). The printer output generated 
is in SWTPC PR-40 compatible format. The printer initialization routine 
begins at $X7CE and the printer output routine begins at $X7B6. Thus, 
users with printers other than the PR-40, will want to disassemble this 
part of the disassembler to see how to modify these routines for their 
particular type of printer. 


DISASSEMBLY MODE 


Entering the disassembly mode causes the instruction at the address 
specified to be disassembled and displayed. The disassembled output 
contains: the opcode in hex, the disassembled instruction mnemonic 
(in Motorola standard mnemonics), the program counter, the operand 
field, a branch address field (for relative branches), and the ASCII 
equivalent for the operand. 


For example: 


>T1234TDD 
> 1234 86 LDA A #$41 A 
Where: 
1) 1234 is the program counter in hex 
2) 86 is the value of the disassembled instruction in hex 
3) "LDA A" is the instruction mnemonic 
4) "#$41" is the operand, and 
5) "A" (shown to the right) is the ASCII equivalent of the operand. 
NOTE: ASCII characters outside of the range of $20 through $5F 
will be shown as a period. 


TDl waits for one of the following commands after having disassembled the 
instruction at the address specified: 


COMMAND COMMAND 
LETTER FUNCTION 


D Exit TD1 and return to MIKBUG. 


T Restart TDl. This causes the ">T" prompt to return asking for 
a new address and mode selection. 


SPACE Disassemble the next instruction in sequence. NOTE: Invalid 
6800 opcodes disassemble to a mnemonic of "***" and are 


treated as a NOP. 


R Allows the entry of a four digit stop address. Following 
the stop address by the letter "G" will cause disassembly to 
continue automatically until the stop address is reached. 
Any letter other than "G" will cause TD1 to return to the a>" 
prompt for another disassembly mode command. 


NOTE: Entry of any other character will cause TD] to exit to MIKBUG. 


TRACE MODE 


Entering the trace mode causes the display of the current register 
contents and the next instruction to be executed. 


For example: 


- >TLOOOTDT 
B=FC A=00 X=3100 S=A042 HINZVC 
> 1000 7E JMP $6842 -B 


Where: 
1) B=, A=, X=, and S= are followed by the contents of the 
corresponding register. 


2) “HINZVC" represents the status of the condition code 
register; If the corresponding bit is on, the letter is 
displayed, otherwise the position is left blank. 


3) The next instructon to be executed is displayed in the same 
format used in the disassembly mode. 


TD1 waits for one of the following commands after having displayed the 
above information: 


COMMAND COMMAND 
LETTER FUNCTION 


eee ree pe 


-D Exit TDl and return to MIKBUG. 


T Restart TDl. This causes the ">T" prompt to return asking 
for a new starting address and mode selection. 


SPACE 


Trace command table continued. 


The current instruction is executed and the new register contents 
are displayed along with the disassembly of the next instruction 
to be executed. NOTE: The next instruction is not yet executed; 
it is only displayed. 


Allows the the contents of the registers or memory to be changed 
by entering one of the following letters to specify which to 
change: 


specifies the B register 

specifies the A register 

specifies the X register 

specifies the stack pointer 

specifies the condition code register 

specifies memory. The memory location is specified by 
following the M by a four digit hex address. TD1 will 
print the current contents of the memory location after 
the address is entered. * 


ZaANKY WwW 


After the register, or memory location, has been specified, 

the new value may be entered by hitting the SPACE BAR followed 
by two hex digits. After the value is entered, TDl prints the 
new register contents and the next instruction to be executed 
and then waits for another trace mode command. If no new value 
is to be entered, simply hit carriage return. 


Allows a subroutine to be executed with the trace printout 
inhibited until the subroutine "RTS" is executed. NOTE: When 
tracing a BSR or a JSR instruction, the prompt ">" is replaced 
by a number representing the subroutine nesting depth. The 
"S" command causes trace execution proceed automatically, 
without printout, until the subroutine nesting level returns 
to one less than when the S key was struck. 


Allows the entry of a four-digit hex stop address. Following 


the stop address, either "S" or "G" may be entered. "Gg" 
causes automatic trace execution to continue until the stop 
address is reached. "S" functions similiarly except that the 


trace listing is inhibited until the stop address is reached. 
Entering any other letter returns control to the prompt 
for a new trace mode command. 


NOTE: Automatic trace execution may be halted by hitting CONTROL C 
(see operating notes). 


"J" allows an instruction to be "jumped over" to bypass its 
execution. For example, the conditional branch instruction at 
the bottom of a loop may be skipped over without waiting for 
the condition to be met. When an instruction is "jumped", the 
next instruction to be executed is the next sequential 
instruction. 


OPERATING NOTES 


Striking CONTROL C may be used to stop automatic disassembly or automatic 
“tracing. The prompt ">" returns and is requesting a new command for 

the mode interrupted. NOTE: For systems using the MIKBUG PIA serial 
interface, the detection of a start bit will halt the stepping in 

which case it may be necessary to strike another CONTROL C to gain 
control. 


TD1 looks for calls to MIKBUG's INEEE and OUTEEE routines in order to 
let these routines be executed without TDl's intervention in case the 
MIKBUG PIA serial interface is being used. (This feature may be 
bypassed by changing the code in location $X719,A from S$E1D1 to SFFFF 
and the code in location $X71B,C from SE1AC to SFFFF.) 


LICENSE 


Purchase of this manual and the media containing the Trace-Disassembler 
program conveys to the purchaser a license to copy the Trace- 
Disassembler for his own use, and not for sale or free distribution to 
others. No other license, express or implied is ‘granted. 


LIMITED WARRANTEE 


The license to use the Trace-Disassembler program is sold AS IS 

without warrantee, except that any purchaser not satisfied with the 
program's performance or agreeable to the terms of this warrantee 

May return his copy within 10 days from the date of purchase for a 

full refund. This warrantee is in lieu of all other warrantees express 
or implied. SMOKE SIGNAL BROADCASTING does not warrant the suitability 
of the Trace-Disassembler for any particular user application and will 
not be responsible for damages incidental to its use in a user system. 


APPENDI 


XA 


The following patches to TLl are required to allow the use of SMARTBUG 
which uses an ACIA for terminal I/O: 


TDl is supplied assembled for four different addressing spaces as 


X718/04 08 
X781/01 47 
X783/2B 24 
APPENDIX B 
follows: 
$1700 $3700 


$6700 $c700 


On cassette tape these are ordered as follows: 


Side 
Side 
Side 
Side 


When supplied on disc, 


$1700 
$3700 
$6700 
$C 700 


one first program is the $1700 version 
one second program is the $3700 version 
two first program is the $6700 version 
two second program is the $C700 version 


ve csion 
version 
version 
version 


xX C 


APPENDI 


the files are named as follows: 


is named TD1.1- 
is named TD1.37 
is named TD1.6 
is named fTD1.C 


The first portion of TDl is a table of references which may be of 
concern to the user. 


this ta 


ADDR NA 


ble: 


ME CONTENTS 


X700 COLDS JMP 


X703 WARMS JMP 
X706 OUTEEE JMP 
X709 INEEE JMP 
X70C DEBUG JMP 
X70F BITE JMP 
X712 BADDR JMP 
X715 PRPORT FDB 
X717 BPORT FDB 
X719 OTRAP FDB 
X71A ITRAP  FDB 


$X842 
$X84D 
SE1D1 
SE1AC 
SE0E3 
SE055 
$E047 
$801C 
$8004 


SE1D1 
SE1AC 


The following table explains the contents of 


USAGE 

TD1 cold start entry point 

TDl warms start entry point 

character output routine 

character input routine 

entry point to system monitor 

input byte (2 hex digits and return value in A) 
input address (4 hex digits and return value in X) 
address of PR-40 compatible printer PIA 

address of terminal control port (used for status 
checking. Must be $8008 for SMARTBUG. ) 

Output routine address trap 

input routine address trap 


PRIMTEE twI7T- ZY $x 7CE 
PRINTER OUT - ie? $X 7 BE 
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